Package "linux-hwe"

 linux-hwe (5.3.0-66.60) bionic; urgency=medium
 .
   * bionic/linux-hwe: 5.3.0-66.60 -proposed tracker (LP: #1891053)
 .
   * ipsec: policy priority management is broken (LP: #1890796)
     - xfrm: policy: match with both mark and mask on user interfaces
 .
   * cgroup refcount is bogus when cgroup_sk_alloc is disabled (LP: #1886860)
     - cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
     - cgroup: Fix sock_cgroup_data on big-endian.

 linux-hwe (5.3.0-65.59) bionic; urgency=medium
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update variants
     - [Packaging] update variants
     - [Packaging] update update.conf
     - update dkms package versions
     - [Packaging] update helper scripts
 .
   * Eoan update: upstream stable patchset 2020-07-21 (LP: #1888429)
     - KVM: s390: reduce number of IO pins to 1
     - spi: spi-fsl-dspi: Adding shutdown hook
     - spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer
     - regmap: fix alignment issue
     - ARM: dts: omap4-droid4: Fix spi configuration and increase rate
     - drm/tegra: hub: Do not enable orphaned window group
     - gpu: host1x: Detach driver on unregister
     - spi: spidev: fix a race between spidev_release and spidev_remove
     - spi: spidev: fix a potential use-after-free in spidev_release()
     - ixgbe: protect ring accesses with READ- and WRITE_ONCE
     - i40e: protect ring accesses with READ- and WRITE_ONCE
     - drm: panel-orientation-quirks: Add quirk for Asus T101HA panel
     - drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003
     - s390/kasan: fix early pgm check handler execution
     - cifs: update ctime and mtime during truncate
     - ARM: imx6: add missing put_device() call in imx6q_suspend_init()
     - scsi: mptscsih: Fix read sense data size
     - usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work
     - block: release bip in a right way in error path
     - nvme-rdma: assign completion vector correctly
     - x86/entry: Increase entry_stack size to a full page
     - net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
     - drm/mediatek: Check plane visibility in atomic_update
     - net: cxgb4: fix return error value in t4_prep_fw
     - smsc95xx: check return value of smsc95xx_reset
     - smsc95xx: avoid memory leak in smsc95xx_bind
     - net: hns3: fix use-after-free when doing self test
     - ALSA: compress: fix partial_drain completion state
     - arm64: kgdb: Fix single-step exception handling oops
     - nbd: Fix memory leak in nbd_add_socket
     - cxgb4: fix all-mask IP address comparison
     - bnxt_en: fix NULL dereference in case SR-IOV configuration fails
     - net: macb: mark device wake capable when "magic-packet" property present
     - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON()
     - ALSA: opl3: fix infoleak in opl3
     - ALSA: hda - let hs_mic be picked ahead of hp_mic
     - ALSA: usb-audio: add quirk for MacroSilicon MS2109
     - KVM: arm64: Fix definition of PAGE_HYP_DEVICE
     - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
     - KVM: x86: bit 8 of non-leaf PDPEs is not reserved
     - KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode
     - KVM: x86: Mark CR4.TSD as being possibly owned by the guest
     - kallsyms: Refactor kallsyms_show_value() to take cred
     - module: Refactor section attr into bin attribute
     - module: Do not expose section addresses to non-CAP_SYSLOG
     - kprobes: Do not expose probe addresses to non-CAP_SYSLOG
     - bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
     - Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
     - btrfs: fix fatal extent_buffer readahead vs releasepage race
     - drm/radeon: fix double free
     - dm: use noio when sending kobject event
     - ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE
     - ARC: elf: use right ELF_ARCH
     - s390/mm: fix huge pte soft dirty copying
     - perf/x86/rapl: Move RAPL support to common x86 code
     - perf/x86/rapl: Fix RAPL config variable bug
     - [Packaging] module intel-rapl-perf rename
     - drm: mcde: Fix display initialization problem
     - ASoC: SOF: Intel: add PCI ID for CometLake-S
     - ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL
     - net: ethernet: mvneta: Fix Serdes configuration for SoCs without comphy
     - net: ethernet: mvneta: Add 2500BaseX support for SoCs without comphy
     - ibmvnic: continue to init in CRQ reset returns H_CLOSED
     - powerpc/kvm/book3s64: Fix kernel crash with nested kvm & DEBUG_VIRTUAL
     - iommu/vt-d: Don't apply gfx quirks to untrusted devices
     - sched/core: Check cpus_mask, not cpus_ptr in __set_cpus_allowed_ptr(), to
       fix mask corruption
     - gpio: pca953x: Override IRQ for one of the expanders on Galileo Gen 2
     - gpio: pca953x: Fix GPIO resource leak on Intel Galileo Gen 2
     - bpf, sockmap: RCU splat with redirect and strparser error or TLS
     - bpf, sockmap: RCU dereferenced psock may be used outside RCU block
     - netfilter: ipset: call ip_set_free() instead of kfree()
     - net: mvneta: fix use of state->speed
     - net: dsa: microchip: set the correct number of ports
     - netfilter: conntrack: refetch conntrack after nf_conntrack_update()
     - perf report TUI: Fix segmentation fault in perf_evsel__hists_browse()
     - perf intel-pt: Fix PEBS sample for XMM registers
     - net: hns3: add a missing uninit debugfs when unload driver
     - RDMA/siw: Fix reporting vendor_part_id
     - IB/mlx5: Fix 50G per lane indication
     - net/mlx5: Fix eeprom support for SFP module
     - net/mlx5e: Fix 50G per lane indication
     - net: macb: fix wakeup test in runtime suspend/resume routines
     - net: macb: fix call to pm_runtime in the suspend/resume functions
     - mlxsw: pci: Fix use-after-free in case of failed devlink reload
     - IB/hfi1: Do not destroy hfi1_wq when the device is shut down
     - IB/hfi1: Do not destroy link_wq when the device is shut down
     - ALSA: usb-audio: Add implicit feedback quirk for RTX6001
     - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id
     - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC
     - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC
     - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G

 linux-hwe (5.3.0-64.58~18.04.1) bionic; urgency=medium
 .
   * bionic/linux-hwe: 5.3.0-64.58~18.04.1 -proposed tracker (LP: #1887087)
 .
   [ Ubuntu: 5.3.0-64.58 ]
 .
   * eoan/linux: 5.3.0-64.58 -proposed tracker (LP: #1887088)
   * linux 4.15.0-109-generic network DoS regression vs -108 (LP: #1886668)
     - SAUCE: Revert "netprio_cgroup: Fix unlimited memory leak of v2 cgroups"
 .

 linux-hwe (5.3.0-63.57~18.04.1) bionic; urgency=medium
 .
   * bionic/linux-hwe: 5.3.0-63.57~18.04.1 -proposed tracker (LP: #1885494)
 .
   [ Ubuntu: 5.3.0-63.57 ]
 .
   * eoan/linux: 5.3.0-63.57 -proposed tracker (LP: #1885495)
   * seccomp_bpf fails on powerpc (LP: #1885757)
     - SAUCE: selftests/seccomp: fix ptrace tests on powerpc
   * The thread level parallelism would be a bottleneck when searching for the
     shared pmd by using hugetlbfs (LP: #1882039)
     - hugetlbfs: take read_lock on i_mmap for PMD sharing
   * Eoan update: upstream stable patchset 2020-06-30 (LP: #1885775)
     - ipv6: fix IPV6_ADDRFORM operation logic
     - net_failover: fixed rollback in net_failover_open()
     - bridge: Avoid infinite loop when suppressing NS messages with invalid
       options
     - vxlan: Avoid infinite loop when suppressing NS messages with invalid options
     - tun: correct header offsets in napi frags mode
     - Input: mms114 - fix handling of mms345l
     - ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
     - sched/fair: Don't NUMA balance for kthreads
     - Input: synaptics - add a second working PNP_ID for Lenovo T470s
     - drivers/net/ibmvnic: Update VNIC protocol version reporting
     - powerpc/xive: Clear the page tables for the ESB IO mapping
     - ath9k_htc: Silence undersized packet warnings
     - RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated
     - x86/cpu/amd: Make erratum #1054 a legacy erratum
     - perf probe: Accept the instance number of kretprobe event
     - mm: add kvfree_sensitive() for freeing sensitive data objects
     - aio: fix async fsync creds
     - x86_64: Fix jiffies ODR violation
     - x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs
     - x86/speculation: Prevent rogue cross-process SSBD shutdown
     - x86/reboot/quirks: Add MacBook6,1 reboot quirk
     - efi/efivars: Add missing kobject_put() in sysfs entry creation error path
     - ALSA: es1688: Add the missed snd_card_free()
     - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
     - ALSA: usb-audio: Fix inconsistent card PM state after resume
     - ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt
       Dock
     - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
     - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
     - ACPI: GED: add support for _Exx / _Lxx handler methods
     - ACPI: PM: Avoid using power resources if there are none for D0
     - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
     - spi: dw: Fix controller unregister order
     - spi: bcm2835aux: Fix controller unregister order
     - spi: bcm-qspi: when tx/rx buffer is NULL set to 0
     - PM: runtime: clk: Fix clk_pm_runtime_get() error path
     - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is
       fully iterated
     - ALSA: pcm: disallow linking stream to itself
     - x86/{mce,mm}: Unmap the entire page if the whole page is affected and
       poisoned
     - KVM: x86: Fix APIC page invalidation race
     - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
     - KVM: x86: only do L1TF workaround on affected processors
     - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced
       IBRS.
     - x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
     - spi: Fix controller unregister order
     - spi: pxa2xx: Fix controller unregister order
     - spi: bcm2835: Fix controller unregister order
     - spi: pxa2xx: Fix runtime PM ref imbalance on probe error
     - crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()
     - crypto: virtio: Fix src/dst scatterlist calculation in
       __virtio_crypto_skcipher_do_req()
     - crypto: virtio: Fix dest length calculation in
       __virtio_crypto_skcipher_do_req()
     - selftests/net: in rxtimestamp getopt_long needs terminating null entry
     - ovl: initialize error in ovl_copy_xattr
     - proc: Use new_inode not new_inode_pseudo
     - video: fbdev: w100fb: Fix a potential double free.
     - KVM: nSVM: fix condition for filtering async PF
     - KVM: nSVM: leave ASID aside in copy_vmcb_control_area
     - KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
     - KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data)
     - KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits
     - KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
     - scsi: megaraid_sas: TM command refire leads to controller firmware crash
     - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
     - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
     - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
     - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
     - Smack: slab-out-of-bounds in vsscanf
     - drm/vkms: Hold gem object while still in-use
     - mm/slub: fix a memory leak in sysfs_slab_add()
     - fat: don't allow to mount if the FAT length == 0
     - perf: Add cond_resched() to task_function_call()
     - agp/intel: Reinforce the barrier after GTT updates
     - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
     - ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description
     - mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
     - xen/pvcalls-back: test for errors when calling backend_connect()
     - KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception
     - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
     - drm: bridge: adv7511: Extend list of audio sample rates
     - crypto: ccp -- don't "select" CONFIG_DMADEVICES
     - media: si2157: Better check for running tuner in init
     - objtool: Ignore empty alternatives
     - spi: pxa2xx: Apply CS clk quirk to BXT
     - net: atlantic: make hw_get_regs optional
     - net: ena: fix error returning in ena_com_get_has

 linux-hwe (5.3.0-62.56~18.04.1) bionic; urgency=medium
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update variants
 .
   [ Ubuntu: 5.3.0-62.56 ]
 .
   * CVE-2020-0543
     - UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off when
       not supported
   * Packaging resync (LP: #1786013)
     - [Packaging] update helper scripts
   * Eoan update: upstream stable patchset 2020-06-05 (LP: #1882303)
     - i2c: dev: Fix the race between the release of i2c_dev and cdev
     - KVM: SVM: Fix potential memory leak in svm_cpu_init()
     - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
     - evm: Check also if *tfm is an error pointer in init_desc()
     - ima: Fix return value of ima_write_policy()
     - mtd: spinand: Propagate ECC information to the MTD structure
     - fix multiplication overflow in copy_fdtable()
     - ubifs: remove broken lazytime support
     - iommu/amd: Fix over-read of ACPI UID from IVRS table
     - i2c: mux: demux-pinctrl: Fix an error handling path in
       'i2c_demux_pinctrl_probe()'
     - ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
     - gcc-common.h: Update for GCC 10
     - HID: multitouch: add eGalaxTouch P80H84 support
     - HID: alps: Add AUI1657 device ID
     - HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
     - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
     - scsi: qla2xxx: Delete all sessions before unregister local nvme port
     - configfs: fix config_item refcnt leak in configfs_rmdir()
     - vhost/vsock: fix packet delivery order to monitoring devices
     - aquantia: Fix the media type of AQC100 ethernet controller in the driver
     - component: Silence bind error on -EPROBE_DEFER
     - scsi: ibmvscsi: Fix WARN_ON during event pool release
     - HID: i2c-hid: reset Synaptics SYNA2393 on resume
     - x86/apic: Move TSC deadline timer debug printk
     - gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
     - HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
     - ceph: fix double unlock in handle_cap_export()
     - stmmac: fix pointer check after utilization in stmmac_interrupt
     - USB: core: Fix misleading driver bug report
     - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
     - ARM: futex: Address build warning
     - padata: Replace delayed timer with immediate workqueue in padata_reorder
     - padata: initialize pd->cpu with effective cpumask
     - padata: purge get_cpu and reorder_via_wq from padata_do_serial
     - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
       option
     - ALSA: pcm: fix incorrect hw_base increase
     - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
     - ALSA: hda/realtek - Add more fixup entries for Clevo machines
     - drm/etnaviv: fix perfmon domain interation
     - apparmor: fix potential label refcnt leak in aa_change_profile
     - apparmor: Fix aa_label refcnt leak in policy_update
     - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
     - dmaengine: owl: Use correct lock in owl_dma_get_pchan()
     - drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance.
     - powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
     - powerpc/64s: Disable STRICT_KERNEL_RWX
     - media: fdp1: Fix R-Car M3-N naming in debug message
     - Revert "net/ibmvnic: Fix EOI when running in XIVE mode"
     - Revert "gfs2: Don't demote a glock until its revokes are written"
     - staging: iio: ad2s1210: Fix SPI reading
     - staging: greybus: Fix uninitialized scalar variable
     - iio: sca3000: Remove an erroneous 'get_device()'
     - iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
     - misc: rtsx: Add short delay after exit from ASPM
     - mei: release me_cl object reference
     - ipack: tpci200: fix error return code in tpci200_register()
     - rapidio: fix an error in get_user_pages_fast() error handling
     - rxrpc: Fix a memory leak in rxkad_verify_response()
     - x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
     - iio: adc: stm32-adc: Use dma_request_chan() instead
       dma_request_slave_channel()
     - iio: adc: stm32-adc: fix device used to request dma
     - iio: adc: stm32-dfsdm: Use dma_request_chan() instead
       dma_request_slave_channel()
     - iio: adc: stm32-dfsdm: fix device used to request dma
     - rxrpc: Trace discarded ACKs
     - rxrpc: Fix ack discard
     - ubifs: fix wrong use of crypto_shash_descsize()
     - i2c: fix missing pm_runtime_put_sync in i2c_device_probe
     - evm: Fix a small race in init_desc()
     - afs: Don't unlock fetched data pages until the op completes successfully
     - mtd: Fix mtd not registered due to nvmem name collision
     - net/ena: Fix build warning in ena_xdp_set()
     - x86/mm/cpa: Flush direct map alias during cpa
     - ibmvnic: Skip fatal error reset after passive init
     - iommu/amd: Call domain_flush_complete() in update_domain()
     - drm/amd/display: Prevent dpcd reads with passive dongles
     - KVM: selftests: Fix build for evmcs.h
     - scripts/gdb: repair rb_first() and rb_last()
     - ALSA: hda - constify and cleanup static NodeID tables
     - ALSA: hda: patch_realtek: fix empty macro usage in if block
     - ALSA: hda: Manage concurrent reg access more properly
     - ALSA: hda/realtek - Add supported new mute Led for HP
     - ALSA: hda/realtek - Add HP new mute led supported for ALC236
     - ALSA: hda/realtek: Add quirk for Samsung Notebook
     - ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295
     - ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295
     - ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295
     - KVM: x86: Fix pkru save/restore when guest CR4.PKE=0, move it to x86.c
     - scsi: qla2xxx: Do not log message